AMENDMENTS TO THE CLAIMS 



This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims; 

1 . (Currently amended) A method for sharing a n active secure 
communication sessio n with a cli e nt b e tw ee n a plurality of s e rv e rs , the method 
comprising: 

receiving a first message from the-a_client at a first server ^ in th e plurality 
of s e rv e rs, wherein the first message including includes a session identifier that 
id e ntifi e s is associated with a n active secure communication session ; with th e 
cli e nt; and 

retrieving state information using the session identifier, wherein the state 
information is retrieved by the first server from a database, wherein the state 
information includes a running message digest, wherein a second server updated 
the running message digest at the database as messages passed through the active 
secure communication session, and wherein the database, the client, the first 
server, and the second server are different from one another: and 

using the state information to send a second message from the first server 
to the client through the active secure communication session. 

if th e s e ssion id e ntifi e r do e s not corr e spond to an activ e s e cur e 
communication s e ssion on th e first serv e r, e stablishing an activ e s e cure 
communication s e ssion with th e cli e nt on th e first s e rver by, 

att e mpting to retri e v e state information associat e d with the 
s e ssion id e ntifier for an activ e s e cur e communication session 
b e tw ee n th e cli e nt and a s e cond serv e r, wherein th e state 

2 
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22 information is r e tri e v e d from a third s e rv e r which is diff e r e nt from 

23 the cli e nt, wh e r e in th e stat e information includ e s a s e ssion 

24 e ncryption k e y as s ociat e d with th e activ e s e cur e communication 

25 s e ssion b e tw ee n th e cli e nt and th e s e cond s e rv e r, wh e rein th e first 

26 s e rv e r is diff e r e nt from th e s e cond serv e r, 

27 if th e stat e information for the activ e s e cur e communication 

28 s e ssion is r e tri e v e d, using th e stat e information including th e 

29 e ncryption k e ys to shar e th e activ e s e cur e communication s e ssion 

30 establish e d b e tw ee n th e cli e nt and th e s e cond s e rv e r for subs e qu e nt 

31 communications b e tw ee n th e cli e nt and th e first s e rv e r without 

32 having to s e t up a new s e cur e communication s e ssion b e twe e n the 

33 cli e nt and th e first s e rv e r, wh e r e in th e stat e information is purg e d 

34 from th e s e cond s e rv e r aft e r th e stat e information is r e tri e v e d by 

35 th e first s e rv e r, and 

36 if th e stat e information for th e activ e s e cur e communication 

37 s e ssion is not r e triev e d, communicating with th e cli e nt to e stablish 

38 th e activ e s e cur e communication s e ssion with th e cli e nt, 

1 2-8. (Canceled). 

1 9. (Original) The method of claim 1, further comprising initially 

2 establishing an active secure communication session between the client and the 

3 second server, the active secure communication session being identified by the 

4 session identifier. 

1 10. (Currently amended) The method of claim 1, wherein att e mpting to 

2 retrievinge the state information includes authenticating and authorizing the first 

3 server. 
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1 11-12 (Canceled). 

1 13. (Currently amended) A computer-readable storage medium storing 

2 instructions that when executed by a computer cause the computer to perform a 

3 method for sharing a n active secure communication session with a cli e nt b e tw ee n 

4 a plurality of s e rv e rs , the method comprising: 

5 receiving a first message from the-aclient at a first server ^ in th e plurality 

6 of s e rvers, wherein t he first message including includes a session identifier that 

7 id e ntifi e s is associated with a n active secure communication session; with th e 

8 cli e nt ;-and 

9 retrieving state information using the session identifier, wherein the state 

10 information is retrieved by the first server from a database, wherein the state 

11 information includes a running message digest, wherein a second server updated 

12 the running message digest at the database as messages passed through the active 

13 secure communication session, and wherein the database, the client, the first 

14 server, and the second serve are different from one another: and 

15 using the state information to send a second message from the first server 

16 to the client through the active secure communication session. 

17 if th e s e ssion identifier do e s not correspond to an activ e s e cur e 

18 communication s e ssion on th e first s e rver, e stablishing an activ e s e cur e 

19 communication s e ssion with th e cli e nt on th e first s e rv e r by, 

20 att e mpting to r e tri e v e stat e information associat e d with th e 

21 s e ssion id e ntifi e r for an activ e s e cur e communication s e ssion 

22 b e tw ee n the cli e nt and a s e cond s e rv e r, wh e r e in th e stat e 

23 information is r e tri e v e d from a third s e rv e r which is diff e rent from 

24 the cli e nt, wher e in the stat e information includ e s a s e ssion 

25 e ncryption k e y associat e d with th e activ e s e cur e communication 
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26 session betw ee n the cli e nt and th e s e cond s e rv e r, wher e in th e first 

27 s e rv e r is diff e r e nt from th e s e cond s e rv e r, 

28 if th e stat e information for th e activ e s e cur e communication 

29 s e ssion is retrieved, using tho stat e information including the 

30 e ncryption k e ys to shar e th e activ e s e cur e communication s e ssion 

31 e stablish e d b e tw ee n th e cli e nt and th e s e cond s e rv e r for subs e qu e nt 

32 communications b e tw ee n th e cli e nt and th e first s e rv e r without 

33 having to s e t up a n e w s e cur e communication s e ssion b e tw ee n th e 

34 cli e nt and th e first s e rv e r, wh e r e in th e stat e information is purg e d 

35 from th e s e cond s e rver aft e r th e stat e information is retri e v e d by 

36 th e first s e rv e r, and 

37 if th e stat e information for th e activ e s e cur e communication 

38 session is not retrieved, communicating with the client to establish 

39 th e activ e s e cur e communication s e ssion with th e cli e nt. 

1 14-20. (Canceled). 

1 21 . (Original) The computer-readable storage medium of claim 13, 

2 wherein the method further comprises initially establishing an active secure 

3 communication session between the client and the second server, the active secure 

4 communication session being identified by the session identifier. 

1 22. (Currently amended) The computer-readable storage medium of claim 

2 | 13, wherein att e mpting to retriev ing e the state information includes authenticating 

3 and authorizing the first server. 

1 23-24 (Canceled). 
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1 25. (Currently amended) An apparatus that shares a n active secure 

2 communication session with a cli e nt b e tw ee n a plurality of s e rv e rs , comprising: 

3 a receiving mechanism configured to receive a first message from a client 

4 at a first server, wherein the first message includes a session identifier that is 

5 associated with an active secure communication session; , at a first s e rv e r in th e 

6 plurality of s e rv e rs, that r e c e iv e s a m e ssag e from th e cli e nt, th e m e ssag e including 

7 a s e ssion identifi e r that id e ntifi e s a s e cur e communication s e ssion with th e cli e nt; 

8 a retrieving mechanism configured to retrieve state information using the 

9 session identifier, wherein the state information is retrieved by the first server 

10 from a database, wherein the state information includes a running message digest, 

11 wherein a second server updated the running message digest at the database as 

12 messages passed through the active secure communication session, and wherein 

13 the database, the client, the first server, and the second server are different from 

14 one another; and 

15 a sending mechanism configured to use the state information to send a 

16 second message from the first server to the client through the active secure 

17 communication session. 

18 an e xamination m e chanism that e xamin e s th e s e ssion id e ntifier; and 

19 a s e ssion initialization m e chanism, on th e first s e rv e r, wh e r e in if th e 

20 s e ssion identifi e r does not corr e spond to an activ e s e cur e communication s e ssion 

21 on th e first s e rv e r, th e s e ssion initialization m e chanism is configured to e stablish 

22 an activ e s e cur e communication s e ssion with th e cli e nt by, 

23 attempting to r e tri e v e stat e information associat e d with th e 

24 se ss ion id e ntifier for an activ e s e cur e communication s e ssion 

25 b e tw ee n th e cli e nt and a s e cond s e rv e r, wher e in th e stat e 

26 information is r e tri e v e d from a third s e rv e r which is diff e r e nt from 

27 th e cli e nt, wh e rein th e stat e information includ e s a s e ssion 

28 e ncryption k e y associat e d with th e activ e s e cur e communication 
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29 session b e twoon th e client and tho s e cond sorvor, wheroin the first 

30 serv e r is different from th e s e cond s e rv e r, 

31 if th e stat e information for th e active s e cure communication 

32 session is retrieved, using th e state information including the 

33 encryption keys to shar e th e active s e cure communication s e ssion 

34 establish e d betw ee n th e cli e nt and th e s e cond s e rv e r for subs e qu e nt 

35 communications betw ee n the client and the first s e rver without 

36 having to set up a now s e cur e communication s e ssion b e tw ee n th e 

37 cli e nt and tho first s e rv e r, and 

38 if th e state information for the active s e cure communication 

39 session is not retrieved, communicating with th e client to e stablish 

40 tho activ e s e cur e communication s e ssion with th e cli e nt. 

1 26-32. (Canceled) 

1 33. (Currently amended) The apparatus of claim 25, wherein the s e ssion 

2 initialization r etrieving mechanism is configured to authenticate and authorize the 

3 first server prior to receiving retrieving t he state information. 

1 34-35 (Canceled). 
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